[gin-auth] [Fwd: gsi proxy compatibility test]

[Oxana Smirnova]

Hi,

this is something to be tested even within a Grid: I believe I was the 
first to test it 5 minutes ago for ARC job submission (surprisingly, it 
works :-) ), but we have no GT4-based storage available yet. Something 
to improve.

Cheers,
Oxana

Erwin Laure пишет:
> Hi Olle,
> 
> OK - that would be the way forward. But what do we do for now where most 
> Grids are not RFC compliant? Would it be useful to have such a 
> compatibility test Alex is proposing? Does something like that exist?
> 
> Cheers,
> 
> -- Erwin
> 
> Olle Mulmo wrote:
>>
>> I believe GIN-auth recommended that RFC compliant proxies should be  
>> used.
>>
>> In practice, this means that software from any GT2 or GT3  
>> distributions will _not_ be able to handle this proxy format, whereas  
>> the same libraries shipped with GT4 (and also native openssl 0.9.7g  
>> and beyond) can.
>>
>> Note also that in GT4.0.x, the grid-proxy-init command line tool does  
>> not  generate RFC-compliant proxies by default for backwards  
>> compatibility reasons:
>>
>> You have to type "grid-proxy-init -rfc"
>>
>> /Olle
>>
>> On Mar 16, 2006, at 08:49, Erwin Laure wrote:
>>
>>> Not sure this message went through.
>>>
>>> Cheers,
>>>
>>> -- Erwin
>>>
>>> -------- Original Message --------
>>> Subject:     gsi proxy compatibility test
>>> Date:     Wed, 15 Mar 2006 12:45:28 -0800
>>> From:     Alex Sim <asim at lbl.gov>
>>> Reply-To:     <asim at lbl.gov>
>>> Organization:     Lawrence Berkeley National Laboratory
>>> To:     <gin-auth at ggf.org>
>>> CC:     <asim at lbl.gov>, "'Erwin Laure'" <Erwin.Laure at cern.ch>
>>>
>>>
>>>
>>> I have not been subscribing to this mailing list, and I'm not sure
>>> if this issue has been discussed previously.
>>>  From GIN-DATA mailing list, we came across that GSI proxy format
>>> compatibility testing needs to be addressed.
>>> In many practices, gsi proxy format is not compatible and different
>>> version and implementations of gridftp servers reject the  
>>> authentication
>>> without too much clue. So, if it could be tested as gridftp
>>> interoperability, it'll be great.
>>>
>>> --Alex
>>>
>>
>